Tom Lane wrote:
> pgsql-bugs@postgresql.org writes:
> > select table privilege in postgres allows user to create index on the table
>
> Actually, it appears that CREATE INDEX has no permission check at all.
>
> I agree this is a bug. Probably CREATE INDEX should require ownership
> permission, the same as ALTER TABLE.
Added to TODO:
* Allow only owner to create indexes
-- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610)
853-3000+ If your life is a hard drive, | 830 Blythe Avenue + Christ can be your backup. | Drexel Hill,
Pennsylvania19026